PT-2025-53440
CVE-2025-68942
·
Published
2025-12-26
·
Updated
2026-10-13
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Gitea versions prior to 1.22.2
Description
Gitea versions before 1.22.2 contain a cross-site scripting (XSS) issue. The search input box, used when creating tags and branches, utilizes
v-html instead of v-text, which allows for the execution of malicious scripts.Recommendations
Update to Gitea version 1.22.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾